Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

06/04/2023, 23:03

230406-21qthafe84 10

13/03/2023, 11:50

230313-nzsd2scc6y 1

13/04/2022, 02:53

220413-ddal1adhf9 1

General

  • Target

    dbghelp.7z

  • Size

    2.7MB

  • Sample

    230406-21qthafe84

  • MD5

    5b0ce27d91149caf62fa9f6541f7cece

  • SHA1

    d2066f88adc065d67b74337f5464d29eed61fc96

  • SHA256

    d09a9e5ccce56752e0576e3f43b7fe4d401c577399853ffa34b4cf765b10f15e

  • SHA512

    28faf027e36fc060a347de40131b1091ab3fa14244b5581553d0b787b562dcbff119368354092f0292c70c1472a2c6a71bfa38e418cc1fdcca31b61ca997d214

  • SSDEEP

    49152:BomyQxczjDgC2Ht2HIHFkitaxWiXV+0/TiLOabNN4mCI+SyEEJq8jbrN:GmyrjcJt2HditaxWSVxTiLOa0mCRS/rc

Malware Config

Targets

    • Target

      dbghelp.dll

    • Size

      242.9MB

    • MD5

      31b00fe35cd795058e11e1bc2d8de272

    • SHA1

      e25ebd7ea19dfc1948ac5e50e6166aa73bda5dca

    • SHA256

      b253368444aba74db84589b6af2a5a0971a11c4129b220203870a4f5a82cd6fd

    • SHA512

      ed213e2f0e8e40f2d828c9458fe6b50b4c44ecc0487bc924244b6957115e83737286ff7d082ab89ac11279f4075076b9f65d5d1841a07c0bcae337dd6310f443

    • SSDEEP

      49152:BSjIuHVecUiBfG/aQimk8eGtsLwBnaUSLjV+Xa1TkT:B8HVecUitCk8ZtFqLjx

    • Detects Grandoreiro payload

    • Grandoreiro

      Part of a group of banking trojans, targeting Spanish and Portuguese speaking countries.

MITRE ATT&CK Matrix

Tasks